Chinese Hackers Charged for Multi-Year Spear-Phishing Attacks
Song Wu, a Chinese national, has been indicted on charges of wire fraud and aggravated identity theft. The charges stem from his alleged involvement in…
Author: Cybernoz
Google Chrome browser users given 72 hour deadline to adopt Cybersecurity patches
To the estimated 3 billion active users of the Google Chrome browser worldwide, the United States Cybersecurity and Infrastructure Security Agency (CISA) has issued an…
A Blueprint For Federal Cyber Defense
The Cybersecurity and Infrastructure Security Agency (CISA) revealed the Federal Civilian Executive Branch (FCEB) Operational Cybersecurity Alignment (FOCAL) Plan, marking an important step in the…
CBA banks on AWS EC2 P5 instances to accelerate AI development – Finance – Cloud
Commonwealth Bank has signed up to use EC2 P5 compute instances served out of AWS’ Sydney region, which it will use to power an “AI…
Critical Zero-Click Vulnerability in macOS Calendar App
A critical zero-click vulnerability has been discovered in macOS Calendar, allowing attackers to add or delete arbitrary files within the Calendar sandbox environment and execute…
Unlocking Secure Communications 101: The Fundamentals
Ensuring the protection of data and communications is of utmost importance for organisations adapting to the intricacies of the digital era. Are you knowledgeable about…
Securing Data from Espionage: The Role of Confidential Computing
In an era where data breaches and cyber espionage are increasingly prevalent, protecting sensitive information has never been more crucial. Confidential computing emerges as a…
SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks
Sep 17, 2024Ravie LakshmananSoftware Security / Data Protection SolarWinds has released fixes to address two security flaws in its Access Rights Manager (ARM) software, including…
The Day the IT World Stood Still
Lessons from CrowdStrike on Safeguarding Your Data with Compliance, Continuity and Disaster Recovery Strategies Where were you when the CrowdStrike outage hit? Many of us…
Gateways to havoc: Overprivileged dormant service accounts
Service accounts are non-human identities used to automate machine-to-machine interactions. They support critical functions – such as running scripts, services, and applications like websites, APIs,…
GCP RCE Flaw Let Attackers Execute Code on Millions of Google Servers
Security researchers revealed this week that a critical remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) could have allowed attackers to run malicious…
How to Prepare Your Organization for the Future with Continuous Security Testing
You wouldn’t brush your teeth once a year — it just wouldn’t be frequent enough to maintain proper care and hygiene of a body part…